Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.5

OpenEMR 4.1.0 lets logged‑in users read any file

CVE-2012-0991 · published 14 years ago
Summary

The 4.1.0 version of OpenEMR contains several places where a signed‑in user can trick the system into opening files outside the intended folder by using ".." in a form name field. This can expose sensitive documents or configuration data stored on the server. Apply the vendor’s security update or upgrade to a newer, patched version as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
openemr openemr 4.1.0
cpe:2.3:a:openemr:openemr:4.1.0:*:*:*:*:*:*:*
Original advisory text
Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.ph...
Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
3.5 Low
Exploitation
9% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published7 Feb 2012
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2012-0991 · NVD
Track software like this
Free during beta